{"schema_version":"1.9.0","id":"CGA-f6hx-jf27-fmr8","published":"2026-07-14T11:17:54Z","modified":"2026-09-07T02:03:50.059805548Z","withdrawn":"2026-09-07T02:03:50.059805398Z","related":["CVE-2026-59873","GHSA-23hp-3jrh-7fpw"],"affected":[{"package":{"name":"actions-runner","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/actions-runner"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.336.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"code-server","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/code-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.129.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"gitlab-rails-ce-18.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-18.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.1.6-r31"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"gitlab-rails-ce-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.4-r10"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"gitlab-rails-ce-19.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-19.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.1.2-r8"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"gitlab-rails-ce-19.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-19.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.2.2-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"gitlab-rails-ce-fips-18.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.1.6-r61"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"gitlab-rails-ce-fips-19.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.4-r7"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"gitlab-rails-ce-fips-19.1","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.1.2-r9"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"gitlab-rails-ce-fips-19.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.2.1-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"graalvm-25-ce-nodejs","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/graalvm-25-ce-nodejs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.4-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"homepage","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/homepage"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.2-r5"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"kibana-9.0","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8-r34"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"kibana-9.0-bitnami","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.0-bitnami"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8-r34"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"kibana-9.0-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.0-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8-r34"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"kibana-9.2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.8-r17"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"kibana-9.2-iamguarded","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-9.2-iamguarded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.8-r17"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"kubeflow-centraldashboard","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kubeflow-centraldashboard"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-r25"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"lerna","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/lerna"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.7-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"npm","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/npm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"opensearch-dashboards-2","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"opensearch-dashboards-2-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.5-r18"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"prism","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/prism"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"pulumi-language-nodejs","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/pulumi-language-nodejs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.253.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"saf","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/saf"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"sqlpad","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sqlpad"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.7-r29"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"wazuh-dashboard","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/wazuh-dashboard"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.6-r6"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"wazuh-dashboard-fips","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/wazuh-dashboard-fips"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.6-r4"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"code-server","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/code-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.129.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"kubeflow-centraldashboard","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/kubeflow-centraldashboard"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0-r25"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"lerna","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/lerna"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.7-r11"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"npm","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/npm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"prism","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/prism"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.16.0-r1"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"pulumi-language-nodejs","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/pulumi-language-nodejs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.253.0-r2"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"saf","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/saf"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0-r3"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}},{"package":{"name":"sqlpad","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sqlpad"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.7-r29"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-f6hx-jf27-fmr8.json"}}]}